bitget-login-cdn[.]pages[.]dev

The domain bitget-login-cdn.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Bitget, a cryptocurrency exchange. This scam specifically mimics Bitget's login infrastructure to deceive users into entering credentials or sensitive information, posing an elevated risk of account compromise. As of the latest verification, bitget-login-cdn.pages.dev has been taken offline, though prior activity classified it as a cryptocurrency-related phishing threat.

Technical indicators confirm the malicious nature of bitget-login-cdn.pages.dev. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Webroot, and appears on 1 security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on September 09, 2025, it resolved to the IP address 188.114.96.3, hosted by Cloudflare (AS13335) in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Suspected phishing site | Cloudflare' with an HTTP 403 status. Nameservers for the domain were walt.ns.cloudflare.com and rayne.ns.cloudflare.com, and Gridinsoft assigned a trust score of 0/100.

Users who interacted with bitget-login-cdn.pages.dev should immediately change their Bitget account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized transactions or logins. Victims should also report the domain to their local cybercrime authorities and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.